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Express Mail Label No. 
EL319727354US 



METHOD AND APPARATUS FOR ANONYMOUS 
DATA PROFILING 

BACKGROUND OF THE INVENTION 

This invention relates generally to methods for gathering information, 
and more particularly to methods and apparatus for anonymous data profiling of 
consumers. 

One well accepted marketing tool is to gather information about a 
target audience and direct a product, or service, to that audience. However, it is 
difficult to obtain information about the target audience because many individuals do 
not freely provide information about themselves to strangers. One reason is because 
the more information people divulge about themselves, the more likely it is that others 
will use that information to contact the person that divulged the information. 

Accordingly, it would be desirable to provide companies with targeted 
information while not divulging personal contact information of the consumer. 

BRIEF SUMMARY OF THE INVENTION 

In an exemplary embodiment, a method for gathering anonymous data 
about an individual includes administering a password to the individual, receiving 
information from the individual, and storing the information in a database. Identifiers 
such as name, address and social security number are not included in the gathered 
anonymous data. 

The anonymous data includes a number of attributes. The attributes 
are compared with marketer generated data sets to determine if the marketer generated 
data sets would possibly be a match with the individual's attributes. If a match is 
determined, then the market generated data sets are permitted to reach the consumer. 
The consumer is then given the opportimity to provide feedback to the system to 
enrich the marketer data set. Thus individuals may provide valuable feedback to 
marketers without divulging identifying information about themselves. 

BRIEF DESCRIPTION OF THE DRAWINGS 

Figure 1 is a block diagram of an exemplary embodiment of a server 
architecture for a consumer generated anonymous data system; 
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Figure 2 is a block diagram of an alternative exemplary embodiment of 
a server architecture for a consimier generated anonymous data system; 

Figure 3 is a schematic diagram of a method for generating anonymous 
data profiles of individuals; and 

Figure 4 is a schematic diagram of a method for utilizing anonymous 
data profiles to respond to marketing generated data sets. 

DETAILED DESCRIPTION OF THE INVENTION 

Figure 1 is a block diagram of an exemplary embodiment of a server 
architecture for an electronic data communications network system 10 that gathers and 
utilizes consumer generated anonymous data. System 10 is connected to a distributed 
computer network, such as the Internet, including that part of the Internet known as 
the World Wide Web, The term Web as used herein refers to the World Wide Web, 
wherein computers known as Web servers display graphical and textual information 
using files or "pages" composed in Hyper Text Mark-up Language (HTML). The 
Web servers communicate information over the Web or other network fi-om a Web 
server at a central site to a remote computer terminal used by a customer. Although 
the exemplary system described herein is implemented on the Web, it should be 
understood that other types of distributed computer networks are suitable for being 
connected to system 10. 

In one embodiment of system 1 0, the location of a page on the Web is 
specified by a uniform resource locator (URL), which is an alphanumeric string 
representing the server address on the Web. At the remote computer terminal, a 
remote user initially accesses a page by typing a specified URL into a Web-browser 
such as Netscape™ by Netscape Communications Corporation, or Intemet Explorer™ 
by Microsoft Corporation. Multiple pages at a Web site are linked together via 
hyperlinks which are represented on a computer screen by a graphical icon such as a 
button or a highlighted line of text. Hyperlinks are configured to implicitly invoke 
another URL when a computer user clicks on a computer mouse button while a 
mouse-controlled screen cursor is positioned over a hyperlink icon. 

In one embodiment, as shown in Figure 1, system 10 includes a web 
server 12, an application server 14, a database server 16, a directory server 18, a 
workflow server 20, and a mail server 22. A disk storage unit 24 is coupled to 
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database server 16 and directory server 18 and provides a data repository for storing 
data pertaining to consumer generated anonymous data and marketer generated data. 
Servers 12, 14, 16, 18, 20 and 22 are coupled in a local area network (LAN) 24. LAN 
24 also includes a processor (not shown) programmed to communicate with servers 
12, 14, 16, 18, 20, and 22. 

Web server 12 and mail server 22 are configured to be 
communicatively coupled to computers 26, 28, and 30 of individuals, i.e., consumers, 
via an ISP Internet connection 32. In addition, a plurality of computers 34, 36, 38, 
and 40 of marketers are communicatively coupled to web server 12 and mail server 22 
via ISP Internet connection 32. Further, at least one work station 42 is coupled to 
LAN 24 for simultaneous monitoring of various tasks and methods described below. 
The processor is further programmed to communicate with consumer computers 26, 
28, and 30, with marketer computers 34, 36, 38, and 40, and with work station 42. 

The communication in the exemplary embodiment is illustrated as 
being performed via the Internet through web browsers loaded onto computers 26, 28, 
30, 34, 36, 38, and 40 of consumers and marketers, respectively. Other wide area 
networks (WAN), however, could be used in other embodiments, i.e., the systems and 
processes described herein are not limited to being practiced over the Internet. LAN 
24 is configured to store data obtained through an interface (not shown) such as a web 
page maintained on web server 12, to compare data generated by consumers with data 
generated by marketers, and to enable consumers to access selected sets of 
information generated by marketers. 

Figure 2 is a block diagram of an alternative exemplary embodiment of 
a server architecture for a system 50 that gathers and utilizes consumer generated 
anonymous data. Components in system 50 identical to components of system 10 are 
identified in Figure 2 using the same reference characters as in Figure 1. System 50 
differs fi-om system 10 m that system 50 includes a fax server 52 coupled to LAN 24. 
Fax server 52 communicates with consumers via a telephone link 54. Also, m system 
50 the mail server is incorporated into web server 22. 

The architecture of systems 10 and 50 are exemplary only. Other 
architectures are possible and can be utilized in connection with practicing the 
methods described below. Moreover, the methods described below could 
alternatively be initiated by a consumer without a computer or fax machine. For 
example, customers could phone or mail the required information and an operator 
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could enter data directly into LAN 24 by workstation 42 or by an operator with a 
computer remotely communicating with LAN 24 through ISP Internet Connection 32 
or other WAN. 

Figure 3 is a schematic diagram of a method 100 for generating 
anonymous data profiles about a consumer. Method 100 includes the step of 
accessing 102 a consumer generated anonymous data system, such as systems 10 and 
50 shown in Figures 1 and 2, respectively. Access to consumer generated anonymous 
data systems 10 and 50 is through a secure access that entitles only a limited number 
of individuals to enter systems 10 and 50. As described below in greater detail, the 
information supplied by the individuals is considered to be confidential proprietary 
information. To protect the information from unauthorized individuals seeking 
access, the system includes a security element. One example of such a security 
element is a firewall. 

The firewall is a software-based gateway which impedes or limits 
access to a LAN, such as LAN 24 shown in Figures 1 and 2. The access is machine- 
limited so that only authorized remote computers have permission to get through the 
firewall. To implement the firewall, the system in one embodiment includes servers, 
such as web server 12 shown in Figures 1 and 2, mail server 22 shown in Figure 1, or 
fax server 52 shown in Figure 2, through which all commimications with computers 
outside LAN 24 must take place. Servers 12, 22, and 52 are programmed to validate 
queries from a user on any machine authorized to communicate with LAN 24 via 
remote terminals, such as terminals 26, 28, 30, 34, 36, 38, 40, and 42, Servers 12, 22, 
and 52 include special programs enabling them to forward valid requests or queries 
from authorized machines through the firewall to LAN 24. 

Alternatively, the security element identifies authorized users rather 
than machines. This approach is more complex than the basic firewall approach 
because queries or requests from a user on any remote terminal are validated using an 
encrypted unique identifier inputted at the remote terminal. The unique identifier is, 
e.g., a password such as a validation code consisting of an alphanumeric string. 
Alternatively, the password can be combined with answers to a series of questions. 
The unique identifier is encrypted to frustrate password sniffers who are capable of 
intercepting unencrypted passwords as they pass from machine to machine through 
the Web. Servers 12, 22, and 52 validate the encrypted unique identifier, and allow 
access to LAN 24. In another alternative embodiment, the security element identifies 
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authorized users using a one-time or limited use password supplied by servers 12, 22, 
and 52 on request from the user. 

In one exemplary embodiment, a first time a user accesses the 
consumer generated anonymous data system, the user is requested to create 104 a 
5 multi-character identifier password. After an appropriate password has been created, 
the user is then requested 106 to answer a series of questions. Alternatively, the user 
chooses a series of questions and answers those questions accordingly. The questions 
are personal questions that invoke answers specific to the user. An exemplary 
question is "favorite color". After the personal questions have been answered, the 
10 user is granted access 108 to LAN 24. Once LAN 24 has been accessed, the user is 
provided access 1 10 to a consumer generated anonymous data database. The user is 
Q then requested to fill out 112 a detailed questionnaire as described below in greater 

5 detail. The answers to the questions in the questionnaire are stored 1 14 in a consumer 

iU generated anonymous data database. When the user decides to leave 1 16 the database 

^i; 15 and the LAN, the user exits the consumer generated anonymous data system. 

If: 

. p If the user decides to return to the consimier generated anonymous data 

system, the user again accesses 102 the consumer generated anonymous data system 

Q and is requested to submit 118 the user's password. If the correct password is 

ry submitted, the user is then requested to answer 120 a question specific to the user 

identified by the password. Each question is asked only one time, or a limited number 

IJ of times, per visit, or per day, to reduce the possibility of someone other than the user 

correctly answering the questions. In addition, all communications between the user 
and the consimier generated anonymous data system are encrypted to provide 
additional security measures to method 100. 

25 If the user answers the question correctly, the user is granted access to 

the LAN as described above. If the user answers the question incorrectly, the user is 
requested to answer a second question. If the user answers the second answer 
correctly, the user is granted access to the LAN. If, however, the user answers the 
second question incorrectly, the user is requested to answer a third question. This 

30 question and answer session continues imtil either the user correctly answers a 
question, or the system exhausts its list of questions. If no correct answers axo given, 
the user is denied access to the system. In an alternative embodiment, if the user 
incorrectly answers the first question, the user is denied access to the system for a 
remainder of the day. 
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When access is granted to the user, all communications between the 
user and the consumer generated anonymous data system are conducted utilizing the 
password. The user is directed to supply no contact information to the system. Such 
information includes, but is not limited to, name, address, social security number, and 
telephone number. The lack of this contact information in the consumer generated 
anonymous data database adds a further layer of privacy to the information supplied 
by the user to the system. This supplied information may then be utilized by the 
system, while the user's identity is maintained in confidence by the user. The system 
never has access to the user's identity. 

The consumer profile is generated using the questionnaires. A series of 
questionnaires will be presented to the consumer. Each questionnaire will take the 
consxmier about 10-15 minutes to complete. The questions will be formatted, for 
example, as multiple choice, true/false, or short answer. The first questionnaire will 
be general in nature, and will include questions directed, for example, to categories 
such as age, sex, marital status, zip code, nimiber, sex, and ages of children, spouse, 
job, residence, pets, hobbies, cars, and others. Follow-up questionnaires will include 
questions directed towards answers given in the initial, or previous, questionnaires. 

Figure 4 is a schematic diagram of a method 150 for providing 
feedback regarding sets of marketing data utilizing anonymous consumer data 
profiles. The anonymous consumer generated data profiles are generated and stored 
as explained above with respect to Figure 3, After the profiles are generated, a 
consumer generated anonymous data system, such as one of systems 10 and 50 shown 
in Figures 1 and 2, respectively, accepts marketer generated data, i.e., advertising data, 
in a marketer data base, as described below. An administrator, or intermediary, 
oversees the consumer generated anonymous data system and is the point of contact 
for the marketers and for the consumers. Thus, the marketers have no contact with the 
consumers. 

A company that desires to have consumer feedback on one or more 
products or services accesses 152 the consumer generated anonymous data system via 
a URL. The company then requests 154 to have a set of data reviewed by a relevant 
group of consumers. The sets of data may be, for example, an advertisement or other 
information on which the company would like to obtain feedback. The company 
agrees 156 to provide compensation in return for feedback from the relevant group of 
consumers. The compensation is paid to the intermediary, who then distributes a 
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portion of the compensation to the consumers, as described below in greater detail. 
The set of data is then stored 158 in a marketer database. The set of data is reviewed 
160 by the system to determine 162 the relevant group of consumers. For example, 
the consumer generated anonymous data system includes a processor programmed to 
compare the set of data with each consumer generated profile to determine which 
individual consumers may be interested in viewing the set of data. 

After the processor has determined which consumers may be interested 
in viewing the set of data, a record is made 164 of those consumers. When each 
consumer accesses the consumer generated anonymous data system, those consumers 
on the record are notified 166 of a potentially relevant set of data that may be of 
interest to them. If the consumer views 168 the set of data, the consumer is given the 
opportunity to provide 170 feedback to the system with respect to that set of data. 
The feedback provided by the consumer will include information regarding whether 
the consumer approved or disapproved of the set of data. In addition, the feedback 
will include information regarding whether the consumer has any interest in viewing 
similar sets of data in the future, and whether the timing for viewing similar sets of 
data is appropriate. The system will thus be able to better match consumers with sets 
of data based on the feedback provided by the consumers. The feedback that is 
directed towards the approval or disapproval of the set of data will be aggregated by 
the intermediary and then provided to the company. In addition, the feedback will be 
broken down in a detailed format. 

The consumer then receives 172 compensation for providing feedback 
with respect to the set of data. In an exemplary embodiment, the compensation is in 
the form of digital cash, online credits, or a coupon issued to the user. The coupon 
can be printed by the user and taken to a designated bank, savings and loan, or credit 
union which will then cash the coupon. The user thus maintains their anonymity and 
is still able to be compensated for their time to provide feedback regarding the sets of 
data they reviewed. 

Although the company can access the consumer generated anonymous 
data system, the company is unable to access the consumer generated anonymous data 
database. Access to the consumer generated anonymous data database is only 
permitted if a correct password and answers to a series of questions is given. 
Therefore, the company does not have access to any of the consumer generated 
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anonymous data other than that provided by the intermediary regarding the aggregated 
information of the consiuners. 

The LAN and the consumer generated anonymous data system are 
operated by an intermediary. The intermediary sorts and organizes the data entered by 
the consumers and also the data entered by the companies, hi addition, the 
intermediary matches the correct set of data to be reviewed with the relevant 
individual to review the data. The intermediary also forwards the appropriate 
compensation to the appropriate individual after their review of an ad. 

The consumer generated anonymous data system and the method for 
generating anonymous data profiles provides an extra level of security to individual 
consumers. The consumers can fi-eely divulge information without anyone knowing 
who provided the information. The system allows the consumer to create a self- 
generated profihng data set that is rich in content, yet anonymous. Because of the rich 
content of the data set, the system provides efficient target marketing to companies. 
Thus, companies get aggregated feedback fi-om a targeted audience and consumers 
can provide insight into products and services while keeping their identities fi-om the 
companies. 

While the invention has been described in terms of various specific 
embodiments, those skilled in the art will recognize that the invention can be practiced 
with modification within the spirit and scope of the claims. 
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WHAT IS CLAIMED IS: 

1 . A method for generating an anonymous data profile of an individual, 
said method comprising the steps of: 

administering to the individual a password; 

utilizing the password to access a database; 

5 entering information about the individual in the database; and 

storing the information from the individual in the database. 

2. A method in accordance with Claim 1 wherein said step of 
administering to the individual a password comprises the step of allowing the 
individual to choose a multi-character identifier. 

10 3. A method in accordance with Claim 1 wherein said step of 

administering to the individual a password comprises the step of asking the individual 
a plurality of questions. 

4. A method in accordance with Claim 2 further comprising the step of 
communicating with the individual via the password. 

15 5. A method in accordance with Claim 4 wherein said step of 

communicating with the individual comprises the step of asking the individual for the 
multi-character identifier. 

6. A method in accordance with Claim 5 wherein said step of 
communicating with the individual fiirther comprises the step of asking the individual 

20 at least one personal question, wherein the individual is permitted to enter the 
database only if the correct multi-character identifier is given and if at least one of the 
personal questions is answered correctly. 

7. A method in accordance with Claim 1 wherein said step of receiving 
information from the individual comprises the step of receiving information excluding 

25 a name, a social security number, and an address of the individual. 

8. A method for providing advertising feedback, said method 
comprising the steps of: 
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administering to each individual a password; 

utilizing the password to access a database; 

entering information about the individual in the database; 

storing the entered first set of information in the database; 

presenting at least one of the individuals v^th a second set of 
information; and 

receiving feedback from the at least one individual regarding the 
second set of information. 

9. A method in accordance with Claim 8 wherein said step of 
presenting each individual with a second set of information comprises the step of 
presenting each individual with a second set of information generated by an 
advertiser. 

10. A method in accordance with Claim 8 further comprising the step 
of communicating the feedback in aggregate form to the advertisers. 

11. A method in accordance with Claim 8 wherein said step of 
administering to each individual a password comprises the step of allowing each 
individual to choose a multi-character identifier. 

12. A method in accordance with Claim 8 wherein said step of 
administering to each individual a password comprises the step of asking the 
individual a plurality of questions. 

13. A method in accordance with Claim 8 further comprising the step 
of paying the individuals for their feedback. 

14. A method in accordance with Claim 8 further comprising the step 
of separating the first set of information from the second set of information and 
ensuring the advertisers do not obtain the first set of information. 

15. A method in accordance with Claim 8 wherein said step of 
presenting each individual with a second set of information comprises the step of 
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presenting each individual with a second set of information that is specific to the first 
set of information provided by the individual. 

16. Apparatus for conveying and storing information relating to 
anonymous data profiles, said apparatus comprising: 

5 a first data repository; 

a first computer linked to said first data repository, said first computer 
configured to communicate with said first data repository via a password and provide 
a first set of information about an individual to said first data repository, the first set 
of information lacking information relating to a name, an address, and a social 
10 security number of the individual; 

2 a processor programmed to communicate with said first data repository 

I'U and said first computer, 

\% 17, Apparatus in accordance with Claim 16 wherein said processor is 

. c fiirther programmed to store the first set of information fi-om said first computer if a 

;\ 15 correct password is provided by said first computer. 

1^ 18. Apparatus in accordance with Claim 16 fiirther comprising: 

0 a second data repository; 

a second set of computers linked to said second data repository, said 
second set of computers configured to provide a plurality of second sets of 
20 information to said second data repository, said first data repository separate fi-om said 
second data repository, said processor fiirther programmed to communicate with said 
second data repository and said second set of computers. 

19. Apparatus in accordance with Claim 18 wherein said second set of 
computers cannot access said first data repository. 

25 20. Apparatus in accordance with Claim 18 wherein said processor is 

further programmed to screen the second set of information and grant access to the 
screened second set of information by the first computer if the screened second set of 
information includes at least one attribute compatible with at least one attribute in the 
first set of information. 
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21 . Apparatus in accordance with Claim 20 wherein said first computer 
is configured to access the screened second set of information stored in said first data 
repository. 

22. A system for generating and controlling anonymous data sets via 
an electronic data communications network, said system comprising: 

a control unit for coupling to the communications network; 

a server coupled to said control unit and comprising a consumer 
generated data base for storing information relating to consxxmers, a marketer data 
base for storing information to be reviewed by consumers, and a processor 
programmed to: 

receive consumer generated data sets from consumers, said consumer 
generated data sets controlled by the consumers, each consumer generated data set 
including a set of individual characteristics, said processor further progranmied to 
download said consxjmer generated data sets into said consumer generated data base; 

receive information from marketers, said information controlled by 
said marketers, said processor further programmed to download said marketer 
generated data into said marketer data base; 

said processor further programmed to compare said marketer generated 
data to each said consumer generated data set and if said marketer generated data is 
identified as matching one or more said individual characteristics of said consumer 
generated data sets, designating said marketer generated data for being communicated 
to the consumer. 

23. A system in accordance with Claim 22 wherein said processor is 
further programmed to communicate said designated marketer generated data to the 
consumer if the consumer chooses to view said marketer generated data. 

24. A system in accordance with Claim 23 wherein said processor is 
further programmed to communicate a consumer generated feedback of said 
designated marketer generated data to the marketer. 



-12- 



10209-00007 



25. A system in accordance with Claim 22 wherein said processor is 
further programmed to prevent the marketers from accessing said consumer generated 
data sets, 

26. A system in accordance with Claim 22 wherein said processor is 
further programmed to accept consumer generated data sets from the consumers if a 
correct password is received by said processor. 

27. A system in accordance with Claim 22 wherein said consumer 
generated data sets do not include a name, an address, and a social security nimiber of 
the consumer, 

28. A system in accordance with Claim 22 wherein the electronic data 
communications network is a wide area network comprising the Internet. 
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METHOD AND APPARATUS FOR ANONYMOUS 
DATA PROFILING 

ABSTRACT OF THE DISCLOSURE 

A method for gathering anonymous data about an individual includes 
administering a password to the individual, receiving information from the individual, 
and storing the information in a database. Contact information, such as name, 
address, telephone number and social security number are not included in the gathered 
anonymous data. 
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